A. Overview of data protection
The following information will provide you with an easy to navigate overview of what will happen with your personal data and to what extent (type, scope, purpose) data is processed when you visit this website or our external online presence (e.g. social media profiles). The term „personal data“ comprises all data that can be used to personally identify you. For detailed information about the subject matter of data protection, please consult our Data Protection Declaration, which we have included beneath this copy.
Data recording on this website
Who is the responsible party for the recording of data on this website (i.e. the „controller“)?
The data on this website is processed by the operator of the website. His contact information is available under the Imprint section on this website or below the point data processing controller.
How do we record your data?
We collect your data as a result of your sharing of your data with us. This may, for instance be information you enter into our contact form. Our IT systems automatically record other data when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system or time the site was accessed). This information is recorded automatically when you access this website.
What are the purposes we use your data for?
A portion of the information is generated to guarantee the error free provision of the website, for you wishing us to get in contact with you or to analyse your user patterns. In addition, we use the collected data for advertising purposes and to improve our website.
What rights do you have as far as your information is concerned?
You have the right to receive information about the source, recipients and purposes of your archived personal data at any time without having to pay a fee for such disclosures. You also have a right to request the blocking, deletion and correction of this data. You may object at any time to the future processing of your personal data. If you have consented to the processing of your personal data, you have a right of withdrawal for the future. Furthermore, you have the right to complain to the relevant supervisory agency. If you have any questions about this or other matters relating to data protection, you can contact us at any time under the address given in the imprint or below under data processing controller.
Analysis tools and tools provided by third parties
There is a possibility that your browsing patterns will be statistically analysed when your visit this website. Such analyses are performed primarily with cookies and with what we refer to as analysis programmes. As a rule, the analyses of your browsing patterns are conducted anonymously; i.e. the browsing patterns cannot be traced back to you. You have the option to object to such analyses or you can prevent their performance by not using certain tools. For detailed information about the tools and about your options to object, please consult our Data Protection Declaration below.
B. General information and mandatory information
The operators of this website and its pages take the protection of your personal data very seriously. Hence, we handle your personal data as confidential information and in compliance with the statutory data protection regulations and this Data Protection Declaration.
Whenever you use this website, a variety of personal information will be collected. Personal data comprises data that can be used to personally identify you. This Data Protection Declaration explains which data we collect as well as the purposes we use this data for. It also explains how, and for which purpose the information is collected.
We herewith advise you that the transmission of data via the Internet (i.e. through e-mail communications) may be prone to security gaps. It is not possible to completely protect data against third party access.
Information about the responsible party (referred to as the „controller“ in the GDPR)
The data processing controller according to Art. 4 Nr. 7 GDPR on this website is:
Dientzenhofer Straße 19
Phone: +49 9371 6602480
Revocation of your consent to the processing of data
Some data processing operations are only possible with your express consent. You can revoke an already given consent at any time. An informal message, e.g. by e-mail to us is enough. The legality of the data processing carried out until the revocation remains unaffected by the revocation.
Right to object to the collection of data in special cases; right to object to direct advertising
In the event that data are processed on the basis of Art. 6 para. 1 sent. 1 lit. e or f GDPF, you have the right to at any time object to the processing of your personal data based on grounds arising from your unique situation. This also applies to any profiling based on these provisions. To determine the legal basis, on which any processing of data is based, please consult this data protection declaration. If you log an objection, we will no longer process your affected personal data, unless we are in a position to present compelling protection worthy grounds for the processing of your data, that outweigh your interests, rights and freedoms or if the purpose of the processing is the claiming, exercising or defence of legal entitlements. (objection pursuant to Art. 21 para. 1 GDPR)
If your personal data is being processed in order to engage in direct advertising, you have the right to at any time object to the processing of your affected personal data for the purposes of such advertising. This also applies to profiling to the extent that it is affiliated with such direct advertising. If you object, your personal data will subsequently no longer be used for direct advertising purposes. (objection pursuant to Art. 21 para. 2 GDPR)
For further information on personal data, please contact us at any time at the address given in the imprint.
Right of information about, rectification and eradication of data
Within the scope of the applicable statutory provisions, you have the right to at any time demand information about your archived personal data, their source and recipients as well as the purpose of the processing of your data. You may also have a right to have your data rectified or eradicated. If you have questions about this subject matter or any other questions about personal data, please do not hesitate to contact us at any time at the address provided in the Imprint section or here below data processing controller.
Right to demand processing restrictions
You have the right to demand the imposition of restrictions as far as the processing of your personal data is concerned. To do so, you may contact us at any time at the address provided in the Imprint section of this website.
Right to data portability
You have the right to demand that we hand over any data we automatically process on the basis of your consent or in order to fulfil a contract be handed over to you or a third party in a commonly used, machine readable format. If you should demand the direct transfer of the data to another controller, this will be done only if it is technically feasible.
Right to log a complaint with the competent supervisory agency
In the event of violations of the GDPR, data subjects are entitled to log a complaint with a supervisory agency, in particular in the member state where they usually maintain their domicile, place of work or at the place where the alleged violation occurred. The right to log a complaint is in effect regardless of any other administrative or court proceedings available as legal recourses.
SSL and/or TLS encryption
For security reasons and to protect the transmission of confidential content, such as purchase orders or inquiries you submit to us as the website operator, this website uses either an SSL or a TLS encryption programme. You can recognise an encrypted connection by checking whether the address line of the browser switches from „http://“ to „https://“ and also by the appearance of the lock icon in the browser line. If the SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.
Rejection of unsolicited e-mails
We herewith object to the use of contact information published in conjunction with the mandatory information to be provided in the Imprint section to send us promotional and information material that we have not expressly requested. The operators of this website and its pages reserve the express right to take legal action in the event of the unsolicited sending of promotional information, for instance via SPAM messages.
C. Recording of data on this website
In some instances, our website and its pages use so-called cookies. Cookies do not cause any damage to your computer and do not contain viruses. The purpose of cookies is to make our website more user friendly, effective and more secure. Cookies are small text files that are placed on your computer and stored by your browser e.g. to remember your language settings for this website.
You can adjust the settings of your browser to make sure that you are notified every time cookies are placed and to enable you to accept cookies only in specific cases or to exclude the acceptance of cookies for specific situations or in general and to activate the automatic deletion of cookies when you close your browser. If you deactivate cookies, the functions of this website may be limited.
Cookies that are required for the performance of the electronic communications transaction or to provide certain functions you want to use, are stored on the basis of Art. 6 para. 1 sent. 1 lit. f GDPR. The website operator has a legitimate interest in storing cookies to ensure the technically error free and optimised provision of the operator’s services.
If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 sent. 1 lit. a GDPR; the agreement can be revoked at any time for example by changing your Cookie-Settings here.
If other cookies (e.g. cookies for the analysis of your browsing patterns) should be stored, they are addressed separately in this Data Protection Declaration.
Cookie-Consent with Borlabs Cookie
Our website uses the Borlabs cookie consent technology to obtain your consent to the storage of certain cookies in your browser and for their data privacy protection compliant documentation. The provider of this technology is Borlabs - Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg, Germany (hereinafter referred to as Borlabs).
Your current Cookie-Settings in terms of Borlabs Cookie can be viewed and adjusted here.
In order to be able to provide you with our web pages, we use an external web hosting provider who delivers the page accordingly. With the hosting provider (processor pursuant to Art. 28 GDPR) we have concluded an order processing contract according to Art. 28 para. 3 sent. 1 GDPR.
In order for the website to be sent to you, your IP address must be processed. The basis for the processing is our legitimate interest in an online presentation and the provision of information in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.
In addition, our web hosting provider also stores the IP address of each visitor in the log files in order to ward off or track attacks on the website and / or the systems of the provider. According to the provider, these data will be deleted after 7 days. Data processing is also carried out on the basis of legitimate interest in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR.
Server log files
We or our hosting provider, automatically collects and stores information about access to the servers in so-called server log files, which your browser automatically sends to us.
The stored information is: name of the retrieved web page or file, browser type and browser version, the operating system used, referrer URL, IP address, requesting provider, host name of the accessing computer, date and time of the server request. This data is not merged with other data sources.
The server logfile files are stored for a maximum of 7 days and then deleted unless they are needed for the analysis of technical problems, for evidence purposes or for permanent defense against attacks / abuses on the systems (security). Otherwise they will be deleted as soon as a storage for the reasons named above is no longer necessary.
This data is recorded on the basis of Art. 6 para. 1 sent. 1 lit. f GDPR.
D. Analysis tools and advertising
This website uses functions of the web analysis service Google Analytics. The provider of this service is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland. With Google, we have concluded an order processing contract in this context. Google Analytics uses so-called cookies. Cookies are text files, which are stored on your computer and that enable an analysis of the use of the website by users. The information generated by cookies on your use of this website is usually transferred to a Google server in the United States, where it is stored. On our behalf, Google will use this information to make your use of the website evaluable, to compile reports on website activity and to provide other website and internet related services to us as the website operator. The storage of Google Analytics cookies and the utilization of this analysis tool are based on your consent. Legal basis is Art. 6 para. 1 sent. 1 lit. a GDPR. The consent can be revoked at any time For example, you can revoke it by changing your Cookie-Settings here.
On this website, we have activated the IP anonymization function. As a result, your IP address will be abbreviated by Google within the member states of the European Union or in other states that have ratified the Convention on the European Economic Area prior to its transmission to the United States. The full IP address will be transmitted to one of Google’s servers in the United States and abbreviated there only in exceptional cases. The IP address transmitted in conjunction with Google Analytics from your browser shall not be merged with other data in Google’s possession.
You do have the option to prevent the archiving of cookies by making pertinent changes to the settings of your browser software. However, we have to point out that in this case you may not be able to use all of the functions of this website to their fullest extent. Moreover, you have the option prevent the recording of the data generated by the cookie and affiliated with your use of the website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
User- and event-level data stored on Google associated with cookies, user IDs, or promotional IDs (such as DoubleClick cookies, Android Advertising IDs) will be anonymized or deleted after 14 months. Details can be found here:https://support.google.com/analytics/answer/7667196?hl=en
On our website we use the "Facebook Pixel" of the social network "Facebook" for the conversion measurement, statistical purposes (analyzes) and for the advertising purposes. It is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are located in the EU, Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. With the "Facebook Pixel", the behavior of the site visitors can be tracked after they e.g. accessed our website by clicking on a Facebook ad or accessed our website in other ways. This allows us to evaluate and optimize the success of Facebook advertisements and the quality of our website content for statistical and market research purposes. Furthermore, we can address our website visitors directly via the social network Facebook, for example by using so-called Facebook ads for visitors of our website.
The data collected is anonymous to us as the operator of this website, we can not draw conclusions about the identity of the users. However, the data are stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can also use the data for its own advertising purposes, in accordance with the Facebook data usage directive. As a result, Facebook can enable ads to be displayed on Facebook and outside of Facebook. This use of the data can not be influenced by us as the site operator.
The use of the Facebook pixel to the purposes named above only occurs if you have given your consent. Legal basis is Art. 6 para. 1 sent. 1 lit. a GDPR. The consent can be revoked at any time. For example, you can revoke it by changing your Cookie-Settings here.
Which data are transmitted and processed in the context of the use of the Facebook pixel
The pixel specific data Pixel-ID and the Facebook-Cookie are transmitted to Facebook. It also includes all information contained in HTTP headers, such as IP addresses, information about the browser, the location of the page, the document, the referrer, and the person using the page. In addition, event data is also processed. Events are actions of the user on our website such as calling a specific URL, clicking a button, submitting a form, watching a particular part of a webpage, etc.
Regardless of consent or revocation on our website, you can revoke the data collection through the Facebook pixel and also through other cookies and similar technologies that serve to conversion analysis and advertising purposes in general via http://optout.networkadvertising.org, http://www.aboutads.info/choices or http://www.youronlinechoices.eu.
The processing of the data by Facebook Inc. is part of the data usage policy of Facebook which can be found at https://www.facebook.com/policy. For more detailed information about the Facebook pixel and how it works, please visit the Help section of Facebook at https://www.facebook.com/business/help/651294705016616.
If you are logged in to Facebook, you may object to the use of the information collected about you for advertising (Facebook ads). You can do this here: https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. The settings are applied to your entire account, regardless of the device used.
If you do not have a Facebook account, you can opt out of use-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/.
E. Online presence in social networks
Data processing through social networks
We maintain publicly available profiles in social networks. The individual social networks we use can be found below. Social networks such as Facebook, Google+ etc. can generally analyse your user behaviour comprehensively if you visit their website or a website with integrated social media content (e.g. like buttons or banner ads). When you visit our social media pages, numerous data protection-relevant processing operations are triggered. In detail:
If you are logged in to your social media account and visit our social media page, the operator of the social media portal can assign this visit to your user account. Under certain circumstances, your personal data may also be recorded if you are not logged in or do not have an account with the respective social media network. In this case, this data is collected, for example, via cookies stored on your device or by recording your IP address.
Using the data collected in this way, the operators of the social media portals can create user profiles in which their preferences and interests are stored. This way you can see interest-based advertising inside and outside of your social media presence. If you have an account with the social network, interest-based advertising can be displayed on any device you are logged in to or have logged in to.
Our social media appearances should ensure the widest possible presence on the Internet. This is a legitimate interest within the meaning of Art. 6 para. 1 sent. 1 lit. f GDPR. The analysis processes initiated by the social networks may be based on divergent legal bases to be specified by the operators of the social networks (e.g. consent within the meaning of Art. 6 para. 1 sent. 1 lit. a GDPR).
Responsibility and assertion of rights
If you visit one of our social media sites (e.g., Facebook), we, together with the operator of the social media platform, are responsible for the data processing operations triggered during this visit. You can in principle protect your rights (information, correction, deletion, limitation of processing, data portability and complaint) vis-à-vis us as well as vis-à-vis the operator of the respective social media portal (e.g. Facebook). Please note that despite the shared responsibility with the social media portal operators, we do not have full influence on the data processing operations of the social media portals. Our options are determined by the company policy of the respective provider.
Individual social networks
We have a profile on Facebook. Provider is Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA. Facebook is certified under the EU-US Privacy Shield.
There is an agreement on the joint processing of personal data (Controller Addendum). This agreement determines which computing operations we or Facebook will be responsible for when you visit our Facebook page. This agreement can be found at the following link: https://www.facebook.com/legal/terms/page_controller_addendum.
Objection/Adjustment of Advertising Settings: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com
We have a profile on YouTube. Provider is Google Ireland Limited, Google Building Gordon House, 4 Barrow Street, Dublin 4, D04 E5W5, Irland. The parent company is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google is certified under the EU-US Privacy Shield.
Objection/Adjustment of Advertising Settings: https://adssettings.google.com/authenticated
We have a profile on Instagram. The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
F. Contacting us
In any form of contact with us (telephone, e-mail, message in social media, contact form, etc.) your given information and data is processed to answer your requests and processing them in accordance with Art. 6 para. 1 sent. 1 lit. b GDPR (in case the processing is required for precontractual measures or for the performance of a contract) or in accordance with Art. 6 para. 1 sent. 1 lit. f GDPR (for the protection of our legitimate interests) and stored in a customer relationship management system or comparable database/data system. The data will be deleted if storage is no longer required or statutory retention requirements and deadlines have expired. A necessity is checked every two years.
G. Third-party Plug-ins and Tools
YouTube with expanded data protection integration
Our website embeds videos of the website YouTube. The website operator is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
We use YouTube in the expanded data protection mode. According to YouTube, this mode ensures that YouTube does not store any information about visitors to this website before they watch the video. Nevertheless, this does not necessarily mean that the sharing of data with YouTube partners can be ruled out as a result of the expanded data protection mode. For instance, regardless of whether you are watching a video, YouTube will always establish a connection with the Google DoubleClick network.
As soon as you start to play a YouTube video on this website, a connection to YouTube’s servers will be established. As a result, the YouTube server will be notified, which of our pages you have visited. If you are logged into your YouTube account while you visit our site, you enable YouTube to directly allocate your browsing patterns to your personal profile. You have the option to prevent this by logging out of your YouTube account.
Furthermore, after you have started to play a video, YouTube will be able to place various cookies on your device. With the assistance of these cookies, YouTube will be able to obtain information about our website's visitors. Among other things, this information will be used to generate video statistics with the aim of improving the user friendliness of the site and to prevent attempts to commit fraud. These cookies will stay on your device until you delete them.
Under certain circumstances, additional data processing transactions may be triggered after you have started to play a YouTube video, which are beyond our control.
The use of YouTube is based on our interest in presenting our online content in an appealing manner. Pursuant to Art. 6 para. 1 sent. 1 lit. f GDPR. If a corresponding agreement has been requested (e.g. an agreement to the storage of cookies), the processing takes place exclusively on the basis of Art. 6 para. 1 sent. 1 lit. a GDPR; the agreement can be revoked at any time.
Via an API, this website uses the mapping service Google Maps. The provider is Google Ireland Limited („Google“), Gordon House, Barrow Street, Dublin 4, Ireland.
To enable the use of the Google Maps features, your IP address must be stored. As a rule, this information is transferred to one of Google’s servers in the United States, where it is archived. The operator of this website has no control over the data transfer.
We use Google Maps to present our online content in an appealing manner and to make the locations disclosed on our website easy to find. Pursuant to Art. 6 para. 1 sent. 1 lit. f GDPR.
For more information on the handling of user data, please review Google’s Data Privacy Declaration under: https://policies.google.com/privacy?hl=en.
H. Contractual services as part of our agency activities
As part of our contractual services (strategic and conceptual consulting, design development, campaign planning, web design, social media marketing, implementation of SEO and local SEO measures, advertisements on our platform and our social media channels) we process the data of our customers. These are master data (e.g. names or addresses), contact data (e.g. e-mail, telephone numbers, fax numbers), content data (e.g. photos, texts, videos, logos), contract data (e.g. subject matter, term), payment data (e.g. bank details, Payment history) and, where applicable, usage and metadata (e.g. in the context of the evaluation and success measurement of marketing measures). We do not process any special categories of personal data, as long as they are not part of a commissioned processing.
Affected by the aforementioned processing are our customers, the interested parties, as well as the customers, users, website visitors, employees of our customers. The processing takes place in any case for the purpose of providing contractual services, billing, evaluation of own business activity and our customer service. Legal basis for the processing under our o.g. Agency services is Art. 6 para. 1 sent. 1 lit. GDPR or for analyzes and evaluations Art. 6 para. 1 sent. 1 lit. f GDPR.
Disclosure of your information to third parties only occurs if it is required as part of an order to perform a contractual service. With regard to the processing of the data that you provide us with in the context of an order, we only act in accordance with the agreements made in the closed order processing contract in accordance with Art. 28 GDPR and process the data only for the purposes specified in the order and in accordance with statutory provisions.
Deletion of the data takes place after expiry of the statutory warranty obligations or comparable retention periods or if storage of the data e.g. is still necessary because of continued project support. A necessity of keeping the data is checked every three years. In the case of statutory tax retention, a deletion takes place after its expiration. The deletion of data disclosed to us by third parties within the framework of an order by our client, we delete the data according to the specifications of the data processing agreement according to Art. 28 GDPR. This is basically the case after the end of the order.
I. Contact Management, Administration, Financial Accounting & Organization
As part of our administrative tasks, as well as the organization of our business, financial accounting and other legal obligations (such as archiving), we process the same data that we process in the course of the performance of our contractual services. The purpose of this processing is our interest in maintaining our business and providing services to our clients, administration, financial accounting, data archiving, office organization and contact management. The legal basis for these processing operations is Art. 6 para. 1 sent. 1 lit. c GDPR and Art. 6 para. 1 sent. 1 lit. f GDPR.
As part of these processing activities, we might submit data to the financial administration, tax consultants and auditors. Due to our business interests, we also store information about suppliers, consultants, organizers and other business partners for the purpose of later establishing contacts or initiating contracts. Since most of this data is company-related data, we store it permanently. The legal basis for the use of such cookies is Art. 6 para. 1 sent. 1 lit. f GDPR.
J. Market research and other business analyzes
In order to operate our business efficiently and to recognize customer wishes, user expectations and market trends and to be able to optimize our offer, we analyze data on business transactions, contracts, inquiries, etc. that we have. In the course of this, we process communication, inventory, contract, payment and usage data as well as, if necessary, metadata on the basis of Art. 6 para. 1 sent. 1 lit. f GDPR. The analyzes are for internal purposes only and will not be published or disclosed to third parties.
K. Competitions and Raffles
We process personal data of participants in our competitions and raffles in compliance with the relevant data protection provisions, as far as the processing for the offer and implementation of the raffle is contractually required, the participants have consented to the processing of the data or the processing of our legitimate interests, such as protection against misuse or the safety of the raffle.
If in the course of the competition or raffle entries of the participants are published (e.g. in the context of a vote or presentation of the raffle entries or the winners or the reporting on the raffle), we point out that the names of the participants can also be published in this context. The participants can object the publication at any time.
If the raffle takes place within a social network (e.g. Facebook or Instagram), the usage and privacy policies of the respective platforms apply. In this case we point out that we are responsible for the participants' information provided in the raffle and for inquiries regard to the raffle.
The data of the participants will be deleted as soon as the raffle or the competition is over and the data is no longer required to inform the winners or we no longer expect any questions regarding the raffle. The data of the participants will be deleted six months after the end of the competition at the latest. Data of the winners can be stored longer, e.g. to be able to answer questions about the winnings or fulfill the winnings; in this case, the retention period depends on the type of winning and is e.g. for goods or services up to three years, e.g. to handle warranty cases.
The legal basis for the processing of personal data in the context of competitions and raffles is Art. 6 para. 1 sent. 1 lit. b GDPR.
If data in connection with the raffle were also collected for other purposes, their processing and the duration of storage is performed according to the data protection guidelines to this use.
L. Participation in Affiliate Affiliate Programs
We as the operator of this website receive a commission if users follow an affiliate link placed on our website and then buy something on our partner's website. The price of the recommended items will not be higher for the buyers.
Within our online presence, we rely in this regard on the basis of our legitimate interests in the economic operation of our website according to Art. 6 para. 1 sent. 1 lit. f GDPR, when participating in affiliate systems, uses industry-standard tracking as required to operate, analyze, and optimize the Affiliate System offer.
Our participation in affiliate programs requires us and our affiliate to understand and measure whether and how many users are taking advantage of our affiliate's offers through affiliate links on our website. For this purpose, the affiliate links are either supplemented by specific values and / or components of the links or, after reaching the target website, certain information about the click on the affiliate link is stored in a cookie. Among the values processed and stored in this context are e.g. the home page (referrer), our affiliate program identifier, the time of the click, an online user ID, or values relevant to tracking, such as: an ad ID, affiliate ID or categories of products.
Amazon Affiliate Program
Note: Amazon and the Amazon logo are trademarks of Amazon.com, Inc. or one of its partners.
Booking.com Partner Program
Last Update: October 26, 2019